feat(deploy): added deploy wizard

[wyattjoh]

Summary

Adds clerk deploy, an interactive wizard that promotes a linked Clerk application from development to production. The wizard validates clone compatibility, creates the production instance and primary domain, walks the user through the returned CNAME records (with optional BIND zone export to ./clerk-<domain>.zone), verifies DNS/SSL/mail with a per-component spinner chain, and collects production OAuth credentials for Google, GitHub, Microsoft, Apple, and Linear.

State is derived from the Platform API on each run, not persisted locally. The wizard reads the live application, domains, deploy status, and instance config on entry and resumes from the next pending step. The only profile write is instances.production once the production instance exists. Pressing Ctrl-C or picking "Skip" at an OAuth provider exits with Deploy paused and exit code 1; rerunning resumes from whatever the API now reports.

Platform API errors specific to the deploy lifecycle are mapped to typed CliErrors in commands/deploy/errors.ts (unsupported plan features, provider/taken domains, production_instance_exists recovery, SSL/mail retry throttles). The wizard refuses to start in agent mode because production configuration is interactive.

Test plan

• bun run format:check
• bun run lint
• bun run typecheck
• bun run test
• bun run test:e2e:op
• Manual smoke: unlinked directory exits with error: No Clerk project linked; linked directory walks through create → DNS records → BIND export → verification → OAuth → production summary; Ctrl-C at OAuth exits with Deploy paused and exit code 1; rerun resumes at the skipped provider.

[changeset-bot]

🦋 Changeset detected

Latest commit: 878b726

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
clerk	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[wyattjoh]

!snapshot

[github-actions]

Snapshot published

npm install -g clerk@1.3.1-snapshot.0dd30be

Package	Version
clerk	1.3.1-snapshot.0dd30be

Published from 0dd30be

[wyattjoh]

Stack: wyattjoh/deploy

• feat(deploy): added deploy wizard #260 👈 this PR

Part of a stacked-prs chain. Do not merge manually.

[coderabbitai]

Actionable comments posted: 1

🧹 Nitpick comments (1)

scripts/cleanup-test-users.test.ts (1)

11-28: ⚡ Quick win

Consider simplifying the mock pattern.

The current mock reads its own call count via mock.calls.length, which creates a circular type reference requiring the complex casting chain. A simpler approach uses a closure variable:

♻️ Simpler mock pattern

  test("retries transient Platform API failures before returning JSON", async () => {
+   let attempts = 0;
    globalThis.fetch = mock(async () => {
-     const attempts = (globalThis.fetch as unknown as ReturnType<typeof mock>).mock.calls.length;
+     attempts++;
      if (attempts === 1) {
        return new Response("temporary failure", { status: 500 });
      }

      return Response.json({ instances: [] });
-   }) as unknown as typeof fetch;
+   }) as typeof fetch;

    const result = await plapiGet("/v1/platform/applications/app_123", "ak_test", {
      delayMs: 0,
    });

    expect(result).toEqual({ instances: [] });
    expect(globalThis.fetch).toHaveBeenCalledTimes(2);
  });

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@scripts/cleanup-test-users.test.ts` around lines 11 - 28, The mock for
globalThis.fetch is overcomplicated by reading its own mock.calls.length
(causing the cast chain); change the mock in the test "retries transient
Platform API failures before returning JSON" to use a closure-scoped counter
variable (e.g., let attempts = 0) that you increment each invocation inside the
mock instead of querying (globalThis.fetch as ...).mock.calls.length, and keep
the existing behavior of returning a 500 on the first call and Response.json({
instances: [] }) thereafter so plapiGet is exercised and the expectation on call
count still holds.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@packages/cli-core/src/commands/deploy/prompts.ts`:
- Around line 64-72: The retry prompt in chooseDnsVerificationRetryAction
currently lists "Skip DNS verification for now" first so Enter defaults to skip;
update chooseDnsVerificationRetryAction (returning DnsVerificationAction) to
make "Check again" the safe default by either placing the { name: "Check again",
value: "check" } choice first in the choices array and/or explicitly setting the
select helper's default/initial value to "check" (use the select API's
initial/default property for this prompt if available) so pressing Enter
triggers "check" not "skip".

---

Nitpick comments:
In `@scripts/cleanup-test-users.test.ts`:
- Around line 11-28: The mock for globalThis.fetch is overcomplicated by reading
its own mock.calls.length (causing the cast chain); change the mock in the test
"retries transient Platform API failures before returning JSON" to use a
closure-scoped counter variable (e.g., let attempts = 0) that you increment each
invocation inside the mock instead of querying (globalThis.fetch as
...).mock.calls.length, and keep the existing behavior of returning a 500 on the
first call and Response.json({ instances: [] }) thereafter so plapiGet is
exercised and the expectation on call count still holds.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 20ba068c-6400-4d41-a9d3-8f51af568904

📥 Commits

Reviewing files that changed from the base of the PR and between f65cea4 and c735a0b.

📒 Files selected for processing (21)

• .changeset/deploy-wizard.md
• .claude/rules/logging.md
• packages/cli-core/src/cli-program.test.ts
• packages/cli-core/src/cli-program.ts
• packages/cli-core/src/commands/auth/login.ts
• packages/cli-core/src/commands/deploy/README.md
• packages/cli-core/src/commands/deploy/copy.test.ts
• packages/cli-core/src/commands/deploy/copy.ts
• packages/cli-core/src/commands/deploy/errors.ts
• packages/cli-core/src/commands/deploy/index.test.ts
• packages/cli-core/src/commands/deploy/index.ts
• packages/cli-core/src/commands/deploy/prompts.ts
• packages/cli-core/src/commands/deploy/providers.test.ts
• packages/cli-core/src/commands/deploy/providers.ts
• packages/cli-core/src/lib/errors.ts
• packages/cli-core/src/lib/plapi.test.ts
• packages/cli-core/src/lib/plapi.ts
• packages/cli-core/src/lib/spinner.test.ts
• packages/cli-core/src/lib/spinner.ts
• scripts/cleanup-test-users.test.ts
• scripts/cleanup-test-users.ts

💤 Files with no reviewable changes (2)

• packages/cli-core/src/lib/errors.ts
• packages/cli-core/src/commands/deploy/errors.ts

✅ Files skipped from review due to trivial changes (3)

• .claude/rules/logging.md
• packages/cli-core/src/commands/auth/login.ts
• .changeset/deploy-wizard.md

🚧 Files skipped from review as they are similar to previous changes (1)

• packages/cli-core/src/commands/deploy/copy.ts

[wyattjoh]

!snapshot

[github-actions]

Snapshot published

npm install -g clerk@1.5.1-snapshot.5891fa2

Package	Version
clerk	1.5.1-snapshot.5891fa2

Published from 5891fa2

[wyattjoh]

!snapshot

[github-actions]

Snapshot published

npm install -g clerk@1.5.1-snapshot.878b726

Package	Version
clerk	1.5.1-snapshot.878b726

Published from 878b726